Generating a certificate in the certification authority

The instructions are provided for Microsoft Enterprise Certification Authority deployed on Windows Server 2016.

We recommend using the Internet Explorer® browser. Other browsers may display some Microsoft Enterprise Certification Authority pages incorrectly.

To generate a certificate based on a CSR file:

1. Open a previously created request file in any text editor and copy the contents of the file to the clipboard.
2. Open the page of your certification authority in your browser: https://<server address>/certsrv.
3. Select Request a certificate.

   This opens the Request a Certificate page.

4. Select advanced certificate request.

   This opens the Advanced Certificate Request page.

5. Select Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file.

   This opens the Submit a Certificate Request or Renewal Request page.

6. In the Base-64-encoded certificate request (CMC or PKCS #10 or PKCS #7) field, paste the contents of the request file that you copied at step 1.
7. From the Certificate Template drop-down list, select the template with the Server Authentication extension.
8. Click Submit.

   This opens the Certificate Issued page.

9. Do the following:
   1. Select the encoding of the certificate file.

      The application supports the DER and Base64 encodings for certificates.

   2. Select the format of the certificate:
      • If you want to download an end certificate file with the CER extension that does not contain intermediate certificates, select Download certificate.
      • If you want to download the full chain of certificates in PKCS#7-container format with the P7B extension, select Download certificate chain.

      We recommend downloading the full chain of certificates to avoid problems with validating intermediate certification authorities.

The certificate is generated and saved on your computer in the browser's downloads folder.

Page top